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DETAILED ACTION 

1 . Applicant's arguments filed October 22, 2008 and January 23, 2009, have been 
fully considered. 

2. Claims 15-82 are pending and have been examined. Claims 1-14 have been 
cancelled. 

Response to Amendment 

3. The objection of claim 65 is withdrawn. 

4. Applicant's arguments with respect to the prior art have been considered but are 
moot in view of the new ground(s) of rejection. 

5. Applicant's arguments fail to comply with 37 CFR 1.111 (b) because they amount 
to a general allegation that the claims define a patentable invention without specifically 
pointing out how the language of the claims patentably distinguishes them from the 
references. 

6. Applicant's arguments do not comply with 37 CFR 1 .1 1 1 (c) because they do not 
clearly point out the patentable novelty which he or she thinks the claims present in view 
of the state of the art disclosed by the references cited or the objections made. Further, 
they do not show how the amendments avoid such references or objections. 

Information Disclosure Statement 

7. It is noted that still no Information Disclosure Statement has been filed on this 
application. 
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Claim Rejections - 35 USC § 102 

8. The text of those sections of Title 35, U.S. Code not included in this action can 
be found in a prior Office action. 

9. Claims 39-41, 44-46, 49-52, 60-70, 79, and 81-82 are rejected under 35 
U.S.C. 102(e) as being anticipated by Babowicz et al. (US Patent Application 
Publication 2005/0039032, hereinafter Babowicz). 

Regarding claims 39, 45, 50, 60, 68, and 81, Babowicz teaches 
a system for protecting media content (abstract, fir. 2-5), the system comprising: 
a computing device; media content stored on the computing device; at least one 
digital rights management license stored on the computing device and describing 
allowed uses for the media content (par.36-37, licenses for content); 

digital rights management software stored on the computing device and that, 
when executed by the computing device, causes the computing device to use the digital 
rights management license to determine whether or not a requested use of the media 
content is allowed, and to prevent the requested use of the media content if the license 
does not permit the requested use (par.20, drm); and 

wherein the media content, the at least one digital rights management license, 
and the digital rights management software were installed on the computing device from 
a single storage medium that contained the content, the license, and the software 
(par.20, 51-52, content, program, and license from disc). 

Regarding claim 40, Babowicz teaches a first identifier associated with the at 
least one digital rights management license; a hard drive, coupled to the computing 
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device; a second identifier, stored on the hard drive; and wherein the digital rights 
management software, when executed by the computing device, causes the computing 
device to compare the first identifier to the second identifier before allowing a requested 
use of the media content (pars. 38-51). 

Regarding claim 41, Babowicz teaches wherein the digital rights management 
software comprises a generic module and a unique module (pars. 38-51). 

Regarding claim 44, Babowicz teaches wherein the storage medium is a 
compact disc (abstract). 

Regarding claim 46, Babowicz teaches determining whether or not the 
computing device has secure playback software that can read the digital data; and 
installing secure playback software if the computing device does not have the software 
(abstract). 

Regarding claims 49, 51, 61, and 69, Babowicz teaches wherein the removable 
storage medium is a compact disc (abstract). 

Regarding claims 52 and 70, Babowicz teaches authenticating digital rights 
software that, when executed by a computer, causes the computer to use the at least 
one digital rights management license to determine whether or not to allow playback of 
the digital data (figs. 2-4, pars. 24-30). 

Regarding claim 62, Babowicz teaches authenticating the digital rights 
management software (figs. 2-4, pars. 24-30). 

Regarding claim 63, Babowicz teaches wherein the external device is a 
compact disc burner (abstract). 
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Regarding claim 64, Babowicz teaches wherein the external device is a portable 
audio player (abstract). 

Regarding claim 79, Babowicz teaches transferring at least a portion of the 
digital data to the external device in response to the determination that the digital rights 
management license permits the transfer (pars. 49-53). 

Regarding claim 65, Babowicz teaches translating the at least a portion of the 
digital data into a format that the external device can read (pars. 49-53). 

Regarding claim 66, Babowicz teaches transferring the digital rights 
management software and the digital rights management license from the removable 
storage medium to the portable audio player (pars. 49-53). 

Regarding claim 67, Babowicz teaches wherein: the portable audio player 
contains digital rights management software that is different than the software loaded 
from the removable storage medium; and the method further comprises: translating the 
digital rights management license into a format that the software already on the portable 
audio player can read; and transferring the translated digital rights management license 
to the portable audio player (pars. 43-48). 

Regarding claim 82, Babowicz teaches wherein the first format comports to the 
Redbook compact disc standard (pars. 25-30). 

Claim Rejections - 35 USC § 103 
1 0. The text of those sections of Title 35, U.S. Code not included in this action can 
be found in a prior Office action. 
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11. Claims 42 and 43 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Babowicz 

Regarding claim 42, Babowicz does not expressly disclose, however, Examiner 
takes Official Notice that the use of at least one validation code corresponding to at 
least one predetermined software module; and validation software that, when executed 
by the computing device, causes the computing device to compute at least one 
checksum for the at least one software module and compare the at least one checksum 
against the validation code, to determine if the at least one predetermined software 
module should be trusted was conventional and well known. Therefore, it would have 
been obvious to one having ordinary skill in the art at the time the invention was made 
to use such validation with the system of Babowicz since Examiner takes Official Notice 
that it was conventional and well known. 

Regarding claim 43, Babowicz does not expressly disclose, however, Examiner 
takes Official Notice that the use of at least one validation code is a cryptographically- 
signed hash of a canonically-ordered series of bytes from the at least one 
predetermined software module; and comparing the at least one checksum against the 
validation code comprises: decrypting the cryptographically-signed hash; performing a 
hash on the at least one software module; and comparing the results of the two hashes 
to see if they match was conventional and well known. Therefore, it would have been 
obvious to one having ordinary skill in the art at the time the invention was made to use 
such validation with the system of Babowicz since Examiner takes Official Notice that it 
was conventional and well known. 
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12. Claims 15-38, 47-48, 53-59, 71-77, 78, and 80 are rejected under 35 
U.S.C. 103(a) as being unpatentable over Babowicz, and further in view of 
Hurtado et al. (US Patent 6,611,812, hereinafter Hurtado). 
Regarding claim 15 and 27, Babowicz teaches 

a method of protecting media content stored on a storage medium (abstract), the 
method comprising: 

creating a first session on the medium, the first session containing digital data 
stored in a first format and representing all or substantially all of the media content, the 
digital data in the first session being readable by an electronic device configured to read 
digital data in the first format (fig.2, par.20, first and second sessions); 

creating a second session on the medium, the second session containing digital 
data stored in a second format and representing all or substantially all of the media 
content, the digital data in the second session being readable by a media player 
associated with a computing device and configured to read the digital data in the 
second format (fig.2, par.20, first and second sessions); 

including on the second session at least one digital rights management license 
describing allowed uses for the digital data (par.51-52, license maybe copied from disc); 

including on the second session digital rights management software (par.20, 

drm); 

preventing the media player associated with the computing device configured to 
read the digital data in the second format from accessing the digital data in the first 
format (par.23-24, prevent arbitrary copy of content). 
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Babowicz does not expressly disclose, however, Hurtado teaches 

encrypting the digital data in the second session so that the digital rights 
management software does not grant access to the digital data stored in the second 
session unless the digital rights management software determines that a requested 
access complies with the allowed uses described in the at least one digital rights 
management license (fig. 18, col. 83, lines 4-67). 

Therefore, it would have been obvious to one having ordinary skill in the art at 
the time the invention was made to add encryption to the system of Babowicz. One of 
ordinary skill in the art would have been motivated to perform such a modification to 
further protect the digital data (Hurtado, col. 5-6, summary). 

Regarding claim 16, the combination of Babowicz and Hurtado teaches wherein 
encrypting the data comprises: separating the media audio-content into packets of data; 
encrypting the packets; storing the encrypted packets to the medium; and storing at 
least one decryption key on the medium such that the digital rights management 
software, when executed by a computer, causes the computer to use the at least one 
decryption key to decrypt the packets (Hurtado, col. 17, lines 50-67, col. 18, lines 1-10). 

Regarding claim 17, the combination of Babowicz and Hurtado teaches wherein 
encrypting the data further comprises: creating at least two encryption keys; for every 
encryption key, encrypting at least one packet with that key; encrypting every packet 
with the at least two encryption keys; and wherein the at least one decryption key 
comprises sufficient decryption keys to decrypt all of the encrypted packets (Hurtado, 
col. 17, lines 50-67, col. 18, lines 1-10). 
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Regarding claim 18, the combination of Babowicz and Hurtado teaches wherein 
the encryption keys are symmetric, and wherein the method further comprises: 
generating at least one protection encryption key for each of the at least two encryption 
keys; encrypting each encryption key with an associated protection encryption key; 
storing the at least one encrypted encryption key on the medium; and storing at least 
one protection decryption key on the medium, such that the at least one protection 
decryption key can be used to decrypt the at least one encryption key (Hurtado, col. 17, 
lines 50-67, col. 18, lines 1-10). 

Regarding claim 19, the combination of Babowicz and Hurtado teaches 
wherein: the at least one protection encryption key comprises a generic protection 
decryption key and a unique protection encryption key; and the at least one protection 
decryption key comprises a generic protection decryption key and a unique protection 
decryption key (Hurtado, col. 17, lines 50-67, col. 18, lines 1-10). 

Regarding claim 20, the combination of Babowicz and Hurtado teaches wherein 
storing the at least one protection decryption key comprises integrating the protection 
decryption key inside the digital rights management software (Hurtado, col .85, lines 35- 
67). 

Regarding claim 21, the combination of Babowicz and Hurtado teaches wherein 
the digital rights management software is tamper-resistant (Hurtado, col. 87, lines 32-67, 
col. 88, lines 1-16). 

Regarding claim 22, the combination of Babowicz and Hurtado teaches storing 
a binding identifier on the medium, wherein the binding identifier is associated with the 
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at least one digital rights management license, and is used by the digital rights 
management software to determine whether or not to allow the requested access to the 
digital data in the second session, and wherein the binding identifier cannot be 
duplicated onto another storage medium (Hurtado, col. 86, lines 1-45). 

Regarding claim 23, the combination of Babowicz and Hurtado teaches storing 
the binding identifier comprises encrypting together the at least one license and a copy 
of the binding identifier that is associated with the at least one license; and the digital 
rights management software compares a decrypted copy of the binding identifier to the 
binding identifier present on the medium before allowing the requested access 
(Hurtado, col.89, lines 1-45). 

Regarding claim 24, the combination of Babowicz and Hurtado teaches wherein 
storing the binding identifier comprises: creating a license encryption key from the 
binding identifier; and encrypting the at least one license with the encryption key; and 
the digital rights management software decrypts the at least one license using a 
decryption key created from the binding identifier to determine whether or not to allow 
the requested access to the digital data in the second session (Hurtado, col. 88, lines 
33-67). 

Regarding claim 25, the combination of Babowicz and Hurtado teaches 
wherein: the digital data on the first session comprises a plurality of separate audio 
recordings; the at least one digital rights management license comprises a plurality of 
digital rights management licenses; and at least one of the plurality of digital rights 
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management licenses describes allowed uses for a specific recording (Hurtado, fig. 18, 
col.83, lines 45-67). 

Regarding claim 26, the combination of Babowicz and Hurtado teaches wherein 
the medium is a compact disc (Hurtado, fig. 18). 

Regarding claim 28, the combination of Babowicz and Hurtado teaches wherein 
the encrypted second data comprises a plurality of encrypted packets of data (Hurtado, 
col. 10, lines 1-47). 

Regarding claim 29, the combination of Babowicz and Hurtado teaches wherein 
the plurality of encrypted packets are encrypted with a plurality of encryption keys, and 
wherein the at least one decryption key comprises sufficient decryption keys to decrypt 
all of the encrypted packets (Hurtado, col.30, lines 34-61). 

Regarding claim 30, the combination of Babowicz and Hurtado teaches wherein 
the at least one decryption key is integrated inside the digital rights management 
software (Hurtado, col. 85, lines 35-67). 

Regarding claim 31, the combination of Babowicz and Hurtado teaches wherein 
the digital rights management software is tamper resistant (Hurtado, col. 87, lines 32-67, 
col. 88, lines 1-16). 

Regarding claim 32, the combination of Babowicz and Hurtado teaches a 
binding identifier stored on the compact disc, associated with the at least one digital 
rights management license, and used by the digital rights management software to 
determine whether or not to allow the requested use of the second data, wherein the 
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binding identifier cannot be duplicated onto another compact disc (Hurtado, col. 86, lines 
1-45). 

Regarding claim 33, the combination of Babowicz and Hurtado teaches the at 
least one license and a copy of the binding identifier encrypted together and stored on 
the second session; and wherein the digital rights management software, when 
executed by the computer, also causes the computer to compare a decrypted copy of 
the binding identifier to the binding identifier present on the disc before allowing a 
requested use of the second data (Hurtado, col. 89, lines 1-45). 

Regarding claim 34, the combination of Babowicz and Hurtado teaches 
wherein: the at least one license is encrypted using an encryption key created by using 
the binding identifier a seed; and the digital rights management software, when 
executed by the computer, also causes the computer to decrypt the at least one license 
using a decryption key created from the binding identifier to determine whether or not to 
allow a requested use of the second (Hurtado, col. 88, lines 33-67). 

Regarding claim 35, the combination of Babowicz and Hurtado teaches the 
second data on the second session comprises a plurality of separate audio recordings; 
the at least one digital rights management license comprises a plurality of digital rights 
management licenses; and at least one of the plurality of digital rights management 
licenses describes allowed uses for a specific audio recording (Hurtado, fig. 18, col. 83, 
lines 45-67). 

Regarding claim 36, the combination of Babowicz and Hurtado teaches wherein 
the plurality of digital rights management licenses contain a license describing uses for 
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a plurality of the audio recordings in addition to the at least one license that describes 
uses for a specific audio recording (Hurtado, fig. 18, col. 83, lines 45-67). 

Regarding claim 37, the combination of Babowicz and Hurtado teaches at least 
one validation code associated with the digital rights management software wherein the 
at least one code represents a cryptographically-signed hash of a canonical 
representation of at least one section of the digital rights management software code, 
and wherein the digital rights management software, when executed by the computer, 
causes the computer to detect tampering or replacement of the at least one section of 
code at the time the code is executed by performing a runtime hash of the at least one 
section of code and comparing the runtime hash to the stored cryptographically-signed 
hash (Hurtado, col.87, lines 32-67, col. 88, lines 1-16). 

Regarding claim 38, the combination of Babowicz and Hurtado teaches 
protected playback software that, when executed by the computer, causes the computer 
to play the second data (Hurtado, col.87, lines 32-67, col. 88, lines 1-16). 

Regarding claim 47, Babowicz does not expressly disclose encrypting the at 
least one digital rights management license, and wherein the copied digital rights 
management software, when executed by the computing device, causes the computing 
device to deny access to the digital data on the storage device unless the at least one 
digital rights license is decrypted. However, Hurtado teaches encrypting the at least one 
digital rights management license, and wherein the copied digital rights management 
software, when executed by the computing device, causes the computing device to 
deny access to the digital data on the storage device unless the at least one digital 
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rights license is decrypted (col 47, lines 25-67). The reasoning for combining is the 
same as that for claim 1 5. 

Regarding claim 48, the combination of Babowicz and Hurtado teaches wherein 
encrypting the at least one digital rights management license comprises: generating a 
binding identifier for the storage device; storing the identifier on the storage device; 
generating an encryption key from the binding identifier; encrypting the at least one 
digital rights management license using the generated encryption key; and wherein the 
digital rights management software, when executed by the computing device, causes 
the computing device to use the binding identifier to create a decryption key for the at 
least one license (Hurtado, col. 86, lines 1-45, col. 89, lines 1-45). 

Regarding claims 78 and 80, Babowicz does not expressly disclose the digital 
data stored in the first format is encrypted, and the method further comprises decrypting 
the encrypted data. However, Hurtado teaches the digital data stored in the first format 
is encrypted, and the method further comprises decrypting the encrypted data (Hurtado, 
col. 86, lines 1-45, col. 89, lines 1-45). The reasoning for combining is the same as that 
for claim 15. 

Regarding claims 53 and 71, the combination of Babowicz and Hurtado 
teaches wherein the encrypted data comprises a plurality of encrypted packets of data 
(Hurtado, col. 10, lines 1-45). 

Regarding claims 54 and 72, the combination of Babowicz and Hurtado 
teaches wherein decrypting the data comprises: locating at least one decryption key on 
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the removable storage medium; and using the at least one decryption key to decrypt the 
packets of data (Hurtado, col. 30, lines 34-61). 

Regarding claims 55 and 73, the combination of Babowicz and Hurtado 
teaches the at least one decryption key is itself encrypted with a protection encryption 
key; and the removable storage medium contains at least one protection decryption key 
to decrypt the at least one encrypted decryption key (Hurtado, col. 17, lines 50-67, col. 
18, lines 1-10). 

Regarding claims 56 and 74, the combination of Babowicz and Hurtado 
teaches the protection encryption key comprises a generic protection the encryption key 
and a unique protection encryption key; and the at least one protection decryption key 
comprises a generic protection decryption encryption key and a unique protection 
decryption key (Hurtado, col. 17, lines 50-67, col. 18, lines 1-10). 

Regarding claims 57 and 75, the combination of Babowicz and Hurtado 
teaches wherein the at least one decryption key is symmetric (Hurtado, col. 17, lines 50- 
67, col. 18, lines 1-10). 

Regarding claims 58 and 76, the combination of Babowicz and Hurtado 
teaches generating a symmetric playback protection key; encrypting the at least one 
decryption key with the symmetric key; and wherein decrypting the encrypted packets of 
diqital data stored in the second format further comprises decrypting the at least one 
encrypted decryption key prior to decrypting the packets of data (Hurtado, col. 17, lines 
50-67, col. 18, lines 1-10). 
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Regarding claims 59 and 77, the combination of Babowicz and Hurtado 
teaches playing the encrypted digital data stored in the second format; and deleting the 
at least one decryption key and the decrypted packets of data from memory (Hurtado, 
col. 51, lines 1-67). 

Conclusion 

1 3. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to David Garcia Cervetti whose telephone number is 
(571)272-5861 . The examiner can normally be reached on Monday-Tuesday and 
Thursday-Friday. 

14. If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Nasser Moazzami can be reached on (571)272-4195. The fax phone 
number for the organization where this application or proceeding is assigned is 571- 
273-8300. 

1 5. Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 



/David Garcia Cervetti/ 
Primary Examiner, Art Unit 2436 



